This Linux Bug Gives Attackers Root
A Vulnerability to Hack The World - CVE-2023-4863
AI Is Hacking Everything Now...
732 bytes of Python just borked every Linux machine on earth…
Sorry Windows 10 Users...
My theory on how the webp 0day was discovered #short
My theory on how the webp 0day was discovered (BLASTPASS)
An initiative to secure the world's software | Project Glasswing
Ubuntu under attack, Big flaw affects all Linux distros, Linux beats Windows - Linux Weekly News
Patches Zombie Microsoft bugs rise from the dead, pave way for crims and ransomware scum One was patched almost 14 years ago Crooks are exploiting four Microsoft vulnerabilities - one patched 14 years…
…Also, while Dirty Frag belongs to the same class as the Dirty Pipe and Copy Fail Linux vulnerabilities, it exploits the fragment field of a different kernel data structure. "As with the…
…vulnerability , which uses a mechanism similar to the Copy Fail exploit that's currently setting the Linux server world on fire . This vulnerability affects nearly every Linux install since 2017, and no…
…New vulnerabilities increased by 67% between 2023 and 2025, while exploited vulnerabilities rose by around 30% over the same period. To make matters worse, the median time to exploitation from CVE disclosure…
Head over to Netomize's blog to learn about how we detect the exploitation of the CrushFTP Vulnerability (CVE-2025-31161) with PacketSmith's Yara detection module, using the newly introduced track_state and flow_state ke…
The traditional vulnerability disclosure timeline relies on a fundamental assumption: exploit development and vulnerability discovery take time. Over the last 12 months the integration of LLMs into offensive tooling has …
I co-founded a successful security company close to the Mythos ecosystem and have spoken with participants in the know and I am deeply concerned. We, collectively, have answers for some but not all of the problems ahead …
This one has been building for a month and it came to a head this week. A researcher going by Chaotic Eclipse has released six Windows zero-days publicly over the past several weeks, covering Defender, BitLocker, and Win…
On May 7, Hyunwoo Kim (V4bel) disclosed Dirty Frag — two Linux kernel vulnerabilities (CVE-2026-43284 and CVE-2026-43500) that give unprivileged users deterministic root on most Linux distributions shipped since 2017. Mi…
…We are not aware of any customers being exploited by the other vulnerabilities disclosed today," the company said . "The issues only affect the on-prem EPMM product, and are not present in…
…In an update today, Chaotic Eclipse said that "the real root cause is still not unknown [sic] by the general public" and that the vulnerability is exploitable even in a TPM (Trusted…
…It covers how to scan, detect, assess, exploit, and monetize vulnerabilities in the wild, while also offering rare insight into the significance of vulnerability disclosure programs." Flare researchers analyzed the original post…
…Cybersecurity and Infrastructure Security Agency (CISA) added the CVE-2026-20182 flaw to its Known Exploited Vulnerabilities Catalog on May 14 and ordered federal agencies to secure affected devices within three days…
…At the time, the vulnerability was neither publicly known nor exploited, according to Microsoft, which deemed exploitation "less likely." Fast forward to Wednesday when the US Cybersecurity and Infrastructure Agency added CVE…
…The first attacks on Microsoft Exchange Server occurred as early as Patch Tuesday week, abusing a vulnerability that still hasn't been fixed and continues to be exploited by hackers. Meanwhile, Microsoft…